Surfshark found that 9 out of 10 AI-related fines concern the unlawful use of personal data